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Ever since entanglement was identified as a computational and cryptographic resource, 
researchers have sought efiicient ways to tell whether a given density matrix represents 
an unentangled, or separable, state. This paper gives the first systematic and com- 
prehensive treatment of this (bipartite) quantum separability problem, focusing on its 
deterministic (as opposed to randomized) computational complexity. First, I review the 
one-sided tests for separability, paying particular attention to the semidefinite program- 
ming methods. Then, I discuss various ways of formulating the quantum separability 
problem, from exact to approximate formulations, the latter of which are the paper's 
main focus. I then give a thorough treatment of the problem's relationship with the 
complexity classes NP, NP-complete, and co-NP. I also discuss extensions of Gurvits' 
NP-hardness result to strong NP-hardness of certain related problems. A major open 
question is whether the NP-contained formulation (QSEP) of the quantum separability 
problem is Karp-NP-complete; QSEP may be the first natural example of a problem 
that is Turing-NP-complete but not Karp-NP-complete. Finally, I survey all the pro- 
posed (deterministic) algorithms for the quantum separability problem, including the 
bounded search for symmetric extensions (via semidefinite programming), based on the 
recent quantum de Finetti theorem 0i 0; 3 ; a-nd the entanglement- witness search (via 
interior-point algorithms and global optimization) (J @| • These two algorithms have the 
lowest complexity, with the latter being the best under advice of asymptotically optimal 
point-coverings of the sphere. 
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1 Introduction 

If a d-dimensional quantum physical system can be physically partitioned into two subsystems 
(denoted by superscripts A and B) of dimensions M and N , such that d = MN , then the 
pure state of this total system may be separable, which means — ® for 
IV'^) G C*^ and G C^ and where "(g)" denotes the Kronecker (tensor) product. Without 
loss of generality, assume M < N (except in Section r2. 2. 5p . If \ip) is not separable, then it is 
entangled (with respect to that particular partition). 

Denote by the set of all density operators mapping complex vector space V to itself; 

let T>M,N ■= I?(C*^ (g) C^). The maximally mixed state is Im,n I/MN, where / denotes 
the identity operator. A pure state \ip) is separable if and only if trB(|V')(^|) is a pure state, 
where "tre" denotes the partial trace with respect to subsystem B; a pure state is called 
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maximally entangled if tred^) ("01) is the maximally mixed state I/M in the space of density 
operators on the A-subsystem 'D{C^^). Thus, the mixedness of tredV') ("01) is some "measure" 
of the entanglement of 

A mixed state p € Vm.n is separable if and only if it may be written p = X]i=i PiPt ® pf 
with Pi > and X^iP* = where G I?(C*^) is a (mixed or pure) state of the A- 

subsystem (and similarly for pf S I?(C^)); when k = 1, p is a product state. Let Sm.n C 
T^M.N denote the separable states; let £m,n '■= T^m,n \ Sm,n denote the entangled states. 
The following fact will be used several times throughout this work: 

Fact 1 ([g^) If (J £ Sm.n, then a may he written as a convex combination of M^N"^ pure 
product states, that is, 



where Yh=i Pi = 1 and Q < p, < I for all i ^ 1,2, ... , KPN^. 

Recall that a set of points {xi, . . .,Xj} C R" is affinely independent if and only if the set 
{x2 — Xi,X3 — Xi, . . . ,Xj — xi} is linearly independent in R". Recall also that the dimension of 
X C R" is defined as the size of the largest afHnely-independent subset of X minus 1 . Fact [1] 
is based on the well-known theorem of Caratheodory that any point in a compact convex set 
X C R" of dimension k can be written as a convex combination of /c + 1 affinely-independent 
extreme points of X . 

Definition 1 (Formal quantum separability problem) Let p E 'Dm,n be a mixed state. 
Given the matri^ [p\ (with respect to the standard basis of C^^ (gi ) representing p, decide 
whether p is separable. 

1.1 One-sided tests and restrictions 

Shortly after the importance of the quantum separability problem was recognized in the 
quantum information community, efforts were made to solve it reasonably efhciently. In 
this vein, many one-sided tests have been discovered. A one-sided test (for separability) is 
a computational procedure (with input [p]) whose output can only ever imply one of the 
following (with certainty): 

• p is entangled (in the case of a necessary test) 

• p is separable (in the case of a sufficient test). 

There have been many good articles (e.g. 0, B @|) which review the one-sided (necessary) 
tests. As this work is concerned with algorithms that are both necessary and sufficient tests 
for separability for all M and N - and whose computer-implementations have a hope of being 
useful in low dimensions - I only review in detail the one-sided tests which give rise to such 

"We do not yet define how the entries of this matrix are encoded; at this point, wc assume all entries have 
some finite representation (e.g. "\/2") and that the computations on this matrix can be done exactly. 



M^N^ 




(1) 



LAWRENCE M. lOANNOU 3 



algorithms (see Section rO]) . But here is a list of popular conditions on p giving rise to efficient 
one-sided tests for finite-dimensional bipartite separability: 

Necessary conditions for p to be separable 

• PPT test [l3|: > 0, where "Tb" denotes partial transposition 



• Reduction criterion [ll|: p^ ® I — p > and / (8) — p > 0, where pA := trB(p) and 
"trs" denotes partial trace (and similarly for pe) 



Entropic criterion for a = 2 and in the limit a — *■ 1 [12l |: Sa{p) > raax{S'c[(pA), >S'q(pb)}; 
where, for a > 1, 5„(p) := ^ln(tr(p")) 

• Majorization criterion 13]: -< X'^^ and A^ -< X'^g, where A^ is the list of eigenvalues 
of T in nonincreasing order (padded with zeros if necessary), and x ^ y for two lists of 
size s if and only if the sum of the first k elements of list x is less than or equal to that of 
list y for k = 1,2, ...,s; the majorization condition implies max{rank(p^), rank(p^)} < 
rank(p). 

• Computable cross- norm/reshuffling criterion 

Q, E3: ll^(p)lli < 1, where \\X\\i := 
tr(VAfX) is the trace norm; and U{p), an x matrix, is defined on prod- 
uct states as U{A B) := v{A)v{B)'^ , where, relative to a fixed basis, [v{A)\ = 
(coli([A])'^, . . . , coIa/ ([A])^)^ (and similarly for v{B)), where coli([A]) is the ith col- 
umn of matrix [A]; more generally 16], any linear map U that does not increase the 
trace norm of product states may be used. 

Sufficient conditions for p to be separable 

• Distance from maximally mixed state (see also [TtI]): 

- [13]: e.g. tr(p-/A/,A,)2 < l/MN{MN~l) 

— 13, i3| Ai„in(p) > (2 + MN)~^, where Ai„in(p) denotes the smallest eigenvalue of 



P 

• WhcnM = 2 fil^: p^p"^^- 

When p is of a particular form, the PPT test is necessary and sufficient for separability. 
This happens when 

• MN < 6 [22]; or 



• rank(p) < [2l|, [231 , see also [24 1. 

The criteria not based on eigenvalues are obviously efficiently computable; i.e. computing 
the natural logarithm can be done with a truncated Taylor series, and the rank can be com- 
puted by Gaussian elimination. That the tests based on the remaining criteria are efficiently 
computable follows from the efficiency of algorithms for calculating the spectrum of a Her- 
mitian operator. The method of choice for computing the entire spectra is the QR algorithm 
(see any of 2^ 13, 21\), which has been shown to have good convergence properties (28| . 
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In a series of articles ([29|, [2]J, [23|), various conditions for separability were obtained 
which involve product vectors in the ranges of p and p^^ . Any constructive separability checks 
given therein involve computing these product vectors, but no general bounds were obtained 
by the authors on the complexity of such computations. 



1.2 One-sided tests based on semidefinite programming 

Let HM,Af denote the set of all Hermitian operators mapping C*^ 



to C 



M 



thus, Vm.n C Hjv/,Af- This vector space is endowed with the Hilbert-Schmidt inner product 
{X,Y) = tr{AB), which induces the corresponding norm \\X\\ = ^/tr{X^ and distance 
measure | |X — |. By fixing an orthogonal Hermitian basis for H^/.a?, the elements of Hm,n 
are in one-to-one correspondence with the elements of the real Euclidean space R^'^ ^ . If the 
Hermitian basis is orthonormal, then the Hilbert-Schmidt inner product in Hm.n corresponds 
exactly to the Euclidean dot product in 

Let us be more precise. Let B = {Xi : 
Hermitian basis for Hm.at, where Xq = -7= 



- 0, 1, ... , M'^N^ — 1} be an orthonormal. 
For concreteness, we can assume that the 



elements of B are tensor-products of the (suitably normalized) canonical generators of SU(M) 



and SU(N), given e.g. in [30|. Note tr(Xj) = for all i > 0. Define v : H 



M.N 



R 



M'N^ 



viA) := 



tr{XiA) 
tr{X2A) 



tr{X 



M^N^ 



as 



(2) 



Via the mapping w, the set of separable states Sm^n can be viewed as a full-dimensional 
convex subset of R^^ Jv -1 



{v{a) e R 



c e Sm,n}-, 



(3) 



which properly contains the origin v{Im,n) = G R ~ (recall that there is a ball of 
separable states of nonzero radius centred at the maximally mixed state Im,n)- 

Thus T>m,n and 5m, at may be viewed as subsets of the Euclidean space R^^ ^ ; actually, 
because all density operators have unit trace, 'Dm,n and Sm^n are full-dimensional subsets 
of R*^ N -1 ^ This observation aids in solving the quantum separability problem, allowing 
us to apply easily well-studied mathematical-programming tools. The following is from the 
popular review article of semidefinite programming in [3l| . 



Definition 2 (Semidefinite program (SDP)) Given the vector c e R™ and Hermitian 
matrices Fi G C"^", i — 0,1, . . . ,m, 

minimize c^x (4) 
subject to: F{x) > 0, (5) 

where F{x) := Fq + X^^li ^i^'i,- 

Call X feasible when F(x) > 0. When c — 0, the SDP reduces to the semidefinite feasibility 
problem, which is to find an x such that F(x) > or assert that no such x exists. Semidefinite 
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programs can be solved efficiently, in time 0{m?n^'^). Most algorithms are iterative. Each 
iteration can be performed in time O(m^n^). The number of required iterations has an 
analytical bound of 0{-Jri), but in practice is more like 0(log(n)) or constant. 

1.2.1 A test based on symmetric extensions 

Consider a separable state a = Yl,iPi\''Pt){'^t \ ® a-^d consider the following sym- 

metric extension of a to k copies of subsystem A (fc > 2): 



The state dk is so called because it satisfies two properties: (i) it is symmetric (unchanged) 
under permutations (swaps) of any two copies of subsystem A; and (ii) it is an extension of 
a in that tracing out any of its (fc — 1) copies of subsystem A gives back a. For an arbitrary 
density operator p G 'D{C^'^ ^C^), define a symmetric extension of p to k copies of subsystem 
A as any density operator p' G I?((C*^)'*'^ C^) that satisfies (i) and (ii) with p in place 
of cr. If p does not have a symmetric extension to fco copies of subsystem A for some ka, 
then p ^ Sm.n (else we could construct Pko)- Thus a method for searching for symmetric 
extensions of p to A: copies of subsystem A gives a sufficient test for separability. 

Doherty et al. [H, 0] showed that the search for a symmetric extension to k copies of p (for 
any fixed k) can be phrased as a SDP. This result, combined with the "quantum de Finetti 
theorem" S^, 3^ that p € Sm.n if and only if, for all k, p has a symmetric extension to k 



copies of subsystem A, gives an infinite hierarchy (indexed by A: = 2, 3, . . .) of SDPs with the 
property that, for each entangled state p, there exists a SDP in the hierarchy whose solution 
will imply that p is entangled. 

Actually, Doherty et al. develop a stronger test, inspired by Peres' PPT test. The state dk, 
which is positive semidefinite, satisfies a third property: (iii) it remains positive semidefinite 
under all possible partial transpositions. Thus ak is more precisely called a PPT symmetric 
extension. The SDP can be easily modified to perform a search for PPT symmetric exten- 
sions without any significant increase in computational complexity (one just needs to add 
constraints that force the partial transpositions to be positive semidefinite) . This strengthens 
the separability test, because a given (entangled) state p may have a symmetric extension to 
ko copies of subsystem A but may not have a PPT symmetric extension to fcg copies of sub- 
system A (Doherty et al. also show that the (fc -I- l)st test in this stronger hierarchy subsumes 
the kth test). 

The final SDP has the following form: 

minimize 

subject to: -^fc > (7) 

{Xk f' > 0, jeJ, 

where Xk is a parametrization of a symmetric extension of p to fc copies of subsystem A, and 
J is the set of all subsets of the (fc -|- 1) subsystems that give rise to inequivalent partial trans- 
poses (Xk)'^^ of Xk- By noting that we can restrict our search to so-called Bose- symmetric 
extensions, where {I ® P)p' — p' for all k\ permutations P of the k copies of subsystem A (as 
opposed to just extensions where (1 ® P)p' (1 ® P'^^ — p' for all permutations P), the number 
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of variables of the SDP is m = ((dsj^ - M'^)N^, where ds^^ (*^\'' ^) is the dimension 
of the symmetric subspace of (C*^)^*^. The size of the matrix Xk for the first constraint is 
((isj.)^iV^. The number of inequivalent partial transpositions is | J| — k\' The constraint 
corresponding to the transposition of I copies ofA, Z = 1,2,...,A: — 1, has a matrix of size 
{dsi)"^ {ds^^_i-i)^ 0. I will estimate the total complexity of this approach to the quantum 
separability problem in Section [3.21 

1.2.2 A test based on semidefinite relaxations 

Doherty et al. formulate a hierarchy of necessary criteria for separability in terms of semidef- 
inite programming - each separability criterion in the hierarchy may be checked by a SDP. 
As it stands, their approach is manifestly a one-sided test for separability, in that at no point 
in the hierarchy can one conclude that the given [p] corresponds to a separable state (happily, 
recent results show that, for sufficiently large k, the symmetric-extension test is a complete 
approximate separability test; see Section [372]) . 

Eisert et al. [si] formulate a necessary and sufficient criterion for separability as a hier- 
archy of SDPs. Define the function 

Ea2 {p):= min tiUp - xf) (8) 

xeSM,N 

for p g 'Dm,n- As tr((p — .x)^) is the square of the Euclidean distance from p to x, p is 
separable if and only if Ej2 (p) — 0. The problem of computing Ej^2 (p) (to check whether it 
is zero) is already formulated as a constrained optimization. The following observation helps 
to rewrite these constraints as low-degree polynomials in the variables of the problem: 

Fact 2 (js^l) Let O be a Hermitian operator and let a £ JH satisfy < a < 1. If tr(O^) = o? 
and tr{0^) = a^, then tr{0) — a and rank{0) ~ \ (i.e. O corresponds to an unnormalized 
pure state). 

Combining Fact [2] with Fact [l] the problem is equivalent to 

minimize ^'^{{P ^Y^tLi' ^iY) 

subject to: tr(^-^-^ Xi) = 1 

tr((tr,(X,))2) = (tr(X,))^ 

for i = 1, 2, . . . , M^N^ and j e {A, B} 
tr((tr,(X,))3) ^ (tr(X,))^ 

for i = 1, 2, . . . , M^N^ and j e {A, B}, 

(9) 

where the new variables are Hermitian matrices Xi for i = 1,2,..., APN"^ . The constraints 
do not require Xi to be tensor products of unit-trace pure density operators, because the pos- 
itive coefficients (probabilities summing to 1) that would normally appear in the expression 
"^i^i Xi are absorbed into the Xi, in order to have fewer variables (i.e. the Xi are con- 
strained to be density operators corresponding to unnormalized pure product states). Once 

^Choices are: transpose subsystem B, transpose 1 copy of subsystem A, transpose 2 copies of subsystem A, 
transpose A; — 1 copies of subsystem A. Transposing all k copies of subsystem A is equivalent to transposing 
subsystem B. Transposing with respect to both subsystem B and I copies of subsystem A is equivalent to 
transposing with respect to k — I copies of subsystem A. 
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an appropriate Hermitian basis is chosen for Hm,jv, the matrices Xi can be parametrized by 
the real coefficients with respect to the basis; these coefficients form the real variables of the 
feasibility problem. The constraints in ([9]) are polynomials in these variables of degree less 
than or equal to 3^ 

Polynomially-constrained optimization problems can be approximated by, or relaxed to, 
semidefinite programs, via a number of different approaches (see references in (j^)!^ Some 
approaches even give an asymptotically complete hierarchy of SDPs, indexed on, say, i = 
1,2,.... The SDP at level i + 1 in the hierarchy gives a better approximation to the original 
problem than the SDP at level i; but, as expected, the size of the SDPs grows with i so 
that better approximations are more costly to compute. The hierarchy is asymptotically 
complete because, under certain conditions, the optimal values of the relaxations converge 
to the optimal value of the original problem as « ^ oo. Of these approaches, the method of 
Lasserre 35 1 is appealing because a computational package |36j written in MATLAB is freely 
available. Moreover, this package has built into it a method for recognizing when the optimal 
solution to the original problem has been found (see f3(i| and references therein). Because 
of this feature, the one-sided test becomes, in practice, a full algorithm for the quantum 
separability problem. However, no analytical worst-case upper bounds on the running time 
of the algorithm for arbitrary p G 'Dm,n are presently available. 

1.2.3 Entanglement Measures 



The function E^-i{p) defined in ([5]), but first defined in [37[, is also known as an entanglement 
measure, which, at the very least, is a nonnegative real function defined on 'Dm,n (for a 
comprehensive review of entanglement measures, see [ss!]). If an entanglement measure E{p) 
satisfies 

E{p)=Q ^ peSM,N, (11) 

then, in principle, any algorithm for computing E{p) gives an algorithm for the quantum 
separability problem. Note that most entanglement measures E do not satisfy (jlip : most just 
satisfy E{p) = <J= p e Sm,n- 

'^Alternatively, we could parametrize the pure states (composing Xi) in C*^ and by the real and imaginary 
parts of rectangularly-represented complex coefficients with respect to the standard bases of C^^ and C^: 

minimize 

subject to: tr((p - Efii^' l^f XV-f I ® IV-fX^fD^) = (10) 

tr(Effi'^'l^^>(V'fl®IV'?>(V'?l) = 1. 

This parametrization hard-wires the constraint that the (unnormalized) pure product 

states, but increases the degree of the polynomials in the constraint to 4 (for the unit trace constraint) and 8 
(for the distance constraint). 

dpor our purposes, the idea of a relaxation can be briefly described as follows. The given problem is to solve 
™in3,gRn{p(a;) : gk{x) > 0,k = l,...,m}, where p{x), gi{x) : R" — > R are real-valued polynomials in 
R[ 3^1, .. . ,Xn]. By introducing new variables corresponding to products of the given variables (the number 
of these new variables depends on the maximum degree of the polynomials p,gi), we can make the objective 
function linear in the new variables; for example, when n = 2 and the maximum degree is 3, if p{x) = 
3x1 -I- 2xiX2 + 4xix?, then the objective function is c'^y with c = (0, 3, 0, 0, 2, 0, 0, 0, 4, 0) £ R^" and y e R^°, 
where 10 is the total number of monomials in R[xi,a;2] of degree less than or equal to 3. Each polynomial 
defining the feasible set G := {a; £ R" : gk{x) > 0, fc = 1, . . . ,m} can be viewed similarly. A relaxation of 
the original problem is a SDP with objective function c^y and with a (convex) feasible region (in a higher- 
dimensional space) whose projection onto the original space R" approximates G. Better approximations to 
G can be obtained by going to higher dimensions. 
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A class of entanglement measures that do satisfy (|11|) are the so-called "distance mea- 
sures" Ed{p) '.= minCTG^jvj „ cr), fo'^ reasonable measure of "distance" d{x,y) satis- 
fying d{x,y) > and {d{x,y) = 0) (a; = y). If d is the square of the Euclidean dis- 
tance, we get E^i^p). Another "distance measure" is the von Neumann relative entropy 
S{x,y) := tr(a;(logx - logy)). 

In Eisert et al.'s approach, we could replace E^-i by Ed for any "distance function" d{p^ a) 
that is expressible as a polynomial in the variables of a. What dominates the running time of 
Eisert et al.'s approach is the implicit minimization over Sm.n, so using a different "distance 
measure" (i.e. only changing the first constraint in ([9])) like {tr{p — ct))^ would not improve 
the analytic runtime (because the degree of the polynomial in the constraint is still 2), but 
may help in practice. 



Another entanglement measure E that satisfies (jlip is the entanglement of formation 39 1 



Ep{p):^ min Vp,5(trB(|V.)(V'd)), (12) 

{pi,\ipi){ipi\}i- p=i2iPi\^i){i'i\'~ 

where S{p) := —tT{p\og{p)) is the von Neumann entropy. This gives another strategy for a 
separability algorithm: search through all decompositions of the given p to find one that is 
separable. We can implement this strategy using the same relaxation technique of Eisert et 
al., but first we have to formulate the strategy as a polynomially-constraincd optimization 
problem. The role of the function S is to measure the entanglement of \'ipi){ipi\ by measuring 
the mixedness of the reduced state trB(|V'i)(V'i|)- For our purposes, we can replace S with 
any other function T that measures mixedness such that, for all p G "Dm.n, T{p) > and 
r(p) = if and only if p is pure. Recalling that, for any p G 'Dm,n, tr(p^) < 1 with equality if 
and only if p is pure, the function T{p) := 1 — tr(/o^) suffices; this function T may be written 
as a (finite-degree) polynomial in the real variables of p, whereas S could not. Defining 

E'p{p):= min VKr(trB(|V',:)(V'd)), (13) 

{viMi){^i\}i-- p=Y,iPi\tl'i)(-4'i\ 

we have that E'p satisfies (fTTj) . Using an argument similar to the proof of Lemma 1 in 
[4o| . we can show that the minimum in (|13p is attained by a finite decomposition of p into 
M'^N'^ \ pure states. Thus, the following polynomially-constraincd optimization problem 
can be approximated by semidefinite relaxations: 

minimize Z]f=i^ tr(Xi)r(trB(Xi)) 
subject to: tr(Effi^'+i X, - [p])^ ^ 

tr(E.C"^"^^.) = 1 

tr{X}) = (tr(X,))^ (14) 

for i = 1, 2, . . . , APN"^ + 1 
tr(Xf) = (tr(X,))^ 

for i = 1,2,..., M^N"^ + 1. 



The above has about half as many constraints as Q, so it would be interesting to compare 
the performance of the two approaches. 
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1.2.4 Other tests 

There are several one-sided tests which do not lead to full algorithms for the quantum sepa- 
rability problem for Sm,n- 

Definition 3 (Robust semideflnite program) Given the vector c G R™, Hermitian ma- 
trices Fi e C"^", i = 0, 1, . . . , TO, and vector space T), 

minimize c^ x (15) 
subject to: F{x, A) > 0, for all AeV, (16) 

where Fix, A) := Fo(A) + Y^t^ x,F,{A). 

Brandao and Vianna [4l| have a set of one-sided necessary tests based on deterministic re- 
laxations of a robust semideflnite program, but this set is not an asymptotically complete 
hierarchy. The same authors also have a related randomized quantum separability algorithm 
which uses probabilistic relaxations of the same robust semideflnite program [43] (but ran- 
domized algorithms are outside of our scope). I give their robust semideflnite program at the 
end of Section r3. 3. 11 where we will see a similar (nonrobust) SDP - essentially, a discretiza- 
tion of the robust semideflnite program - that solves the (approximate) quantum separability 
problem. 

Woerdeman [isl has a set of one-sided tests for the case where M — 2. His approach might 
be described as the mirror-image of Doherty et al.'s: Instead of using an infinite hierarchy 
of necessary criteria for separability, he uses an infinite hierarchy of sufficient criteria. Each 
criterion in the hierarchy can be checked with a SDP. 

2 Separability as a Computable Decision Problem 

Definition [T] gave us a concrete definition of the quantum separability problem that we could 
use to explore some important results. Now we step back from that definition and, in Section 
12. li consider more carefully how we might formulate the quantum separability problem for 
the purposes of computing it. After considering exact formulations in Scction [2.1.1i we settle 
on approximate formulations of the problem in Section I2.1.2i and give a few examples that 
are, in a sense, equivalent. 

In Section 12. 2i I discuss various aspects of the computational complexity of the quantum 
separability problem. Section 12.2.11 contains a review of NP-completeness theory. In Sections 
12.2.21 and l2. 2. 3( I give a formulation of the quantum separability problem that is NP-complete 
with respect to Turing reductions. In Section 12.2.41 I consider the quantum separability 
problem's membership in co-NP. In Section 12.2.51 I explore the problem of strong NP- 
hardness of the (approximate) quantum separability problem. Finally, in Section 12.2.61 I 
discuss the open problem of whether the quantum separability problem is NP-complete with 
respect to Karp reductions. 

2.1 Formulating the quantum separability problem 

The nature of the quantum separability problem and the possibility for quantum computers 
allows a number of approaches, depending on whether the input to the problem is classical 
(a matrix representing p) or quantum (T copies of a physical system prepared in state p) and 
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whether the processing of the input wiU be done on a classical computer or on a quantum 
computer. The use of entanglement witnessed in the laboratory is a case of a quantum input 
and very limited quantum processing in the form of measurement of each copy of p. The 
case of more-sophisticated quantum processing on either a quantum or classical input is not 



well studied (see [4^ for an instance of more-sophisticated quantum processing on a quantum 
input). For the remainder of the paper, I focus on the case where input and processing are 
classical (though the algorithm in Section [3T3l can be applied in an experimental setting 0,[H|)- 

2.1.1 Exact formulations 

Let us examine Definition [1] from a computational viewpoint. The matrix [p] is allowed to 
have real entries. Certainly there are real numbers that are uncomputable (e.g. a number 
whose nth binary digit is 1 if and only if the nth Turing machine halts on input n); we 
disallow such inputs. However, the real numbers e, tt, and V2 are computable to any degree 
of approximation, so in principle they should be allowed to appear in [p] . In general, we should 
allow any real number that can be approximated arbitrarily well by a computer subroutine. 
If [p] consists of such real numbers (subroutines), say that "p is given as an approximation 
algorithm for [p]." In this case, we have a procedure to which we can give an accuracy 
parameter (5 > and out of which will be returned a matrix [p\s that is (in some norm) at 
most 5 away from [p\. Because Sm,n is closed, the sequence ([/o]i/n)r!=i.2,... may converge to a 
point on the boundary of Sm,n (when p is on the boundary of Sm,n)- For such p, the formal 
quantum separability problem may be "undecidable" because the (5-radius ball centred at [p\s 
may contain both separable and entangled states for all (5 > [i^ (more generally, see "Type 
II computability" in 0). 

If we really want to determine the complexity of deciding membership in Sm^n, it makes 
sense not to confuse this with the complexity of specifying the input. To give the computer a 
fighting chance, it makes more sense to restrict to inputs that have finite exact representations 
that can be readily subjected to elementary arithmetic operations begetting exact answers. 
For this reason, we might restrict the formal quantum separability problem to instances where 
[p] consists of rational entries: 

Definition 4 (Rational quantum separability problem (EXACT QSEP)) Let 

p G T^M.N be a mixed state such that the matrix [p] (with respect to the standard basis of 
C*^ (g) ) representing p consists of rational entries. Given [p], is p separable? 

As pointed out in [i], Tarski's algorithnj'' [48'] can be used to solve EXACT OSEP. The 
Tarski-approach is as follows. Note that the following first-order logical formulsf is true if 



''An entanglement witness (for p) is defined to be any operator A £ Hjvf.iV such that tr{Acr) < tr{Ap) for all 
(T S Sm n a-nd some p £ £m,n\ we say that "A detects p". Every p 6 Sm.n has an entanglement witness that 
detects it [H. 

^Tarski's result is often called the "Tarski-Seidenberg" theorem, after Seidenberg, who found a slightly better 
algorithm |47|| (and elaborated on its generality) in 1954, shortly after Tarski managed to publish his; but 
Tarski discovered his own result in 1930 (the war prevented him from publishing before 1948). 
SRecall the logical connectives: V ("OR"), A ("AND"), -. ("NOT"); the symbol -+ ("IMPLIES"), in "x ^ y'\ 
is a shorthand, as "x — > y" is equivalent to "(-la;) V y"; as well, we can consider "x V j/" shorthand for 
"-.((-.x) A (-■y))". Also recall the existential and universal quantifiers 3 ("THERE EXISTS") and V ("FOR 
ALL"); note that the universal quantifier V is redundant as "Vx0(a:)" is equivalent to "-iElx-i(/)(x)" . 



LAWRENCE M. lOANNOU 11 



and only if p is separable: 



Vyl[(V*(tr(A*) > 0)) ^ {trAp > 0)], 



(17) 



where A e 'H.m,n and 5* is a pure product state. To see this, note that the subformula enclosed 
in square brackets means "—A is not an entanglement witness for p" , so that if this statement 
is true for all A then there exists no entanglement witness detecting p. When [p] is rational, 
our experience in Section [1.2.21 with polynomial constraints tells us that the formula in (fT7|l 
can be written in terms of "quantified polynomial inequalities" with rational coefhcients: 



9 X is a block of real variables parametrizing the matrix A G 'H.m,n (with respect to an 
orthogonal rational Hermitian basis of Hm.n)', the "Hermiticity" of X is hard- wired by 
the parametrization; 

• y is a block of real variables parametrizing the matrix 

• Q{Y) is a conjunction of four polynomial equations that are equivalent to the four 
constraints tr((trj (^'))2) = 1 and tr((trj(*))3) = 1 for j G {A,B}; 



• r{X,Y) is a polynomial representing the expression tr(74^')i' 

• s(X) is a polynomial representing the expression tr(yl[p]). 

The main point of Tarski's result is that the quantifiers (and variables) in the above sentence 
can be eliminated so that what is left is just a formula of elementary algebra involving Boolean 
connections of atomic formula of the form (a o 0) involving terms a consisting of rational 
numbers, where o stands for any of <,>,=, f^; the truth of the remaining (very long) formula 
can be computed in a straightforward manner. The best algorithms for deciding (|18|) require a 
number of arithmetic operations roug hly equal to (PD)0(l-^l)xO(l'>^l) , where P is the number 
of polynomials in the input, D is the maximum degree of the polynomials, and \X\ {\Y\) 
denotes the number of variables in block X (Y) [ioj. Since P = 6 and D = 3, the running 



2.1.2 Approximate formulations 

The benefit of EXACT QSEP is that, compared to Definition[Tl it eliminated any uncertainty 
in the input by disallowing irrational matrix entries. Consider the following motivation for an 
alternative to EXACT QSEP, where, roughly, we only ask whether the input [p] corresponds 
to something close to separable: 

''To ensure the Hermitian basis is rational, we do not insist that each of its elements has unit Euclidean norm. 
If the basis is {Xi}^_Q j j^i2ff2, where Xq is proportional to the identity operator, then we can ignore the 

Xq components write A = AiXi and ^ = X]f=i^ ^iXi. An expression for tT{A^) in terms of the 

real variables Ai and '1'^ may then look like X]f=i^ Ai'iiitT{Xf). 



VX{(Vr [Q{Y) ^ {r{X, Y) > 0)]) ^ {s{X) > 0)}, 



(18) 



where 




time is roughly 2^^^^''^''K 
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• Suppose we really want to determine the separability of a density operator p such that 
[p] has irrational entries. If we use the EXACT QSEP formulation (so far, we have no 
decidable alternative), we must first find a rational approximation to [p\. Suppose the 
(Euclidean) distance from [p] to the approximation is 5. The answer that the Tarski- 
style algorithm gives us might be wrong, if p is not more than 5 away from the boundary 
of Smm- 

• Suppose the input matrix came from measurements of many copies of a physical state 
p. Then we only know [p] to some degree of approximation. 

• The best known Tarski-style algorithms for EXACT QSEP have gigantic running times. 
Surely, we can achieve better asymptotic running times if we use an approximate for- 
mulation. 

Thus, in many cases of interest, insisting that an algorithm says exactly whether the input 
matrix corresponds to a separable state is a waste of time. In Section r2. 2. 21 we will see that 
there is another reason to use an approximate formulation, if we would like the problem to 
fit nicely in the theory of NP-completeness. 

Gurvits was the first to use the weak membership formulation of the quantum separability 
problem 5^, 51|- For x £ R" and S > 0, let B{x, S) := {y G R" : ||a; — < S}. For a convex 



subset K C R", let S{K, S) U^eKB{x, S) and S{K, -5) {x : B{x, S) C K}. 

Definition 5 (Weak membership problem for K (WMEM(_fi'))) Given a rational vec- 
tor p e R" and rational 6 > 0, assert either that 

p e S{K,S), or (19) 
p i S{K,~S). (20) 



Denote by WMEM{Sm.n) the quantum separability problem formulated as the weak mem- 
bership problem. An algorithm solving WMEM(5M,Af) is a separability test with two-sided 
"error" in the sense that it may assert (|19p when p represents an entangled state and may 
assert (j20p when p represents a separable state. Any formulation of the quantum separability 
problem will have (at least) two possible answers - one corresponding to "p approximately 
represents a separable state" and the other corresponding to "p approximately represents an 
entangled state" . Like in WMEM(5Af.iv), there may be a region of p where both answers are 
valid. We can use a different formulation where this region is shifted to be either completely 
outside Sm,n or completely inside Sm.n- 

Definition 6 (In-biased v^reak membership problem for K (WM.EM.in{K))) Given a 
rational vector p G R" and rational S > 0, assert either that 



p e S{K,S), or 
p i K. 



(21) 
(22) 
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Definition 7 (Out-biased weak membersiiip problem for K (WMEMout(^))) Given 
a rational vector p G R" and rational S > 0, assert either that 

p e K, or (23) 
p i S{K,-S). (24) 

We can also formulate a "zero-error" version such that when p is in such a region, then any 
algorithm for the problem has the option of saying so, but otherwise must answer exactly: 

Definition 8 (Zero-error weak membership problem for K (WMEM°(i<r))) Given a 
rational vector p € R" and rational S > 0, assert either that 

p e K, or (25) 
p i K, or (26) 
p e S{K,S)\S{K,-S) (27) 

All the above formulations of the quantum separability problem are based on the Euclidean 
norm and use the isomorphism between 11m,n and R*^ ^ . We could also make similar for- 
mulations based on other operator norms in Hm,7v- In the next section, we will see yet another 
formulation of an entirely different flavour. While each formulation is slightly different, they 
all have the property that in the limit as the error parameter approaches 0, the problem coin- 
cides with EXACT QSEP. Thus, despite the apparent inequivalence of these formulations, we 
recognize that they all basically do the same job. In fact, WMEM(5M,Af), WMEMin(5A/,7v), 
WMEMout('5M,Ar), and WMEM(5a./,jv)° are equivalent: given an algorithm for one of the 
problems, one can solve an instance {p, S) of any of the other three problems by just calling 
the given algorithm at most twice (with various parameters) I* 

2.2 Computational complexity 

This section addresses how the quantum separability problem fits into the framework of 
complexity theory. I assume the reader is familiar with concepts such as problem, instance 
(of a problem), (reasonable, binary) encodings, polynomially relatedness, size (of an instance), 
(deterministic and nondeterministic ) Turing machine, and polynomial-time algorithm; all of 
which can be found in any of 0,00. 



Generally, the weak membership problem is defined for a class /C of convex sets. For 
example, in the case of WMEM(5A/,Ar), this class is {Sm,n}m,n for all integers M and N 



'To show this equivalence, it suffices to show that given an algorithm for WMEM(cSAf,]v)i one can solve 
WMEMoutCiSjv/.iv) with one call to the given algorithm (the converse is trivial); a similar proof shows that 
one can solve WMEMin(cSM,Jv) with one call to the algorithm for WMEM(iSm,jv)- The other relationships 
follow immediately. Let (p, 5) be the given instance of WMEMoutC^M.iv)- Define po := p + <5(p — lM,N)/'i 
and So := 5/{2y/ MN(MN - 1)). Call the algorithm for WMEM(5m,jv) with input (po,<5o)- Suppose the 
algorithm asserts po ^ S{Sm,N: —^o)- Then, because ||p— poll = f ||p— -^Af.ivll and ||p— /a/,jv|| < 1, we have 
p ^ S(5m, iVi — (5o+5/2)) hence p ^ S{SM.Nt —^)- Otherwise, suppose the algorithm asserts po S S{Sm,N} ^o)- 
By way of contradiction, assume that p is entangled. But then, by convexity of Sm,n and the fact that Sm,n 
contains the ball B{Im jv, 1/ \/MN(MN — 1)), we can derive that the ball B(po, Sq) does not intersect Sm,n- 
But this implies po ^ S(Sm.n,^o) ~ a contradiction. Thus, p S Sm,n- This proof is a slight modification of 
the argument given in [s^ j. See also Lemma 4.3.3 in |5C1( . 
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such that 2 < M < N . An instance of WMEM thus includes the specification of a member 
K oi JC. The size of an instance must take into account the size (K) of the encoding of 
K. It is reasonable that (K) > n when K g R", because an algorithm for the problem 
should be able to work efficiently (in time that is upper-bounded by a polynomial in the size 
of an instance) with points in R" . But the complexity of K matters, too. For example, if 
K extends (doubly-exponentially) far from the origin (but contains the origin) then K may 
contain points that require large amounts of precision to represent; again, an algorithm for 
the problem should be able to work with such points efficiently (for example, it should be able 
to add such a point and a point close to the origin, and store the result efficiently). In the case 
of WMEM (5a/, at), the size of the encoding of Sm,n may be taken as N (assuming M < N), 
as Sm,n is not unreasonably long or unreasonably thin: it is contained in the unit sphere in 
j^M^7V^-i g^^^ contains a ball of separable states of radius n(l/poly(iV)) (see Section [TTT|) I^ 
Thus, the total size of an instance of WMEM(5M,Af), or any formulation of the quantum 
separability problem, may also be taken to be N plus the size of the encoding of (/?, 6). 

2.2.1 Review of NP-completeness 

Complexity theory, and, particularly, the theory of NP-completeness, pertains to decision 
problems - problems that pose a yes/no question. Let 11 be a decision problem. Denote 
by Dn the set of instances of 11, and denote the yes-instances of 11 by Yn. Recall that 
the complexity class P (respectively, NP) is the set of all problems the can be decided by a 
deterministic Turing machine (respectively, nondeterministic Turing machine) in polynomial 
time. The following equivalent definition of NP is perhaps more intuitive: 

Definition 9 (NP) A decision problem 11 is in NP if there exists a deterministic Turing 
machine Tn such that for every instance I G Yn there exists a string Cj of length |C/| € 
0{poly{\I\)) such that Tn, with inputs Cj and (an encoding of) I, can check that I is in Yn 
in time 0{poly{\I\)). 

The string C/ is called a (succinct) certificate. Let II'^ be the complementary problem of 11, 
i.e. Dnc = Dn and Yno := Dn \ Yn- The class co-NP is thus defined as {W : He NP}. 

Let us briefly review the different notions of "polynomial-time reduction" from one problem 
n' to another 11. Let On be an oracle, or black-boxed subroutine, for solving 11, to which 
we assign unit complexity cost. A (polynomial-time) Turing reduction from 11' to 11 is any 
polynomial-time algorithm for 11' that makes calls to On- Write 11' <t n if 11' is Turing- 
reducible to n. A polynomial-time transformation, or Karp reduction, from 11' to 11 is a Turing 
reduction from 11' to 11 in which On is called at most once and at the end of the reduction 
algorithm, so that the answer given by On is the answer to the given instance of 11'. In other 
words, a Karp reduction from 11' to 11 is a polynomial-time algorithm that (under a reasonable 
encoding) takes as input an (encoding of an) instance I' of 11' and outputs an (encoding of 
an) instance / of 11 such that I' S Yn' <^ I G Yn- Write 11' <k n if 11' is Karp-reducible 
to n. Karp and Turing reductions are on the extreme ends of a spectrum of polynomial-time 
reductions; see [H^ for a comparison of several of them. 

^Recall that a function f{n) is in fl(g{n)) when there exist constants c and ng such that cgln) < fin) for all 
n > no. 
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Reductions between problems are a way of determining how hard one problem is relative 
to another. The notion of NP-completeness is meant to define the hardest problems in NP. 
We can define NP-completeness with respect to any polynomial-time reduction; we define 
Karp-NP-completeness and Turing- NP-completeness: 

NPCk := {n e NP : W <k H for aU H' e NP } (28) 
NPCt := {n e NP : W <t H for aU W e NP }. (29) 

We have NPCk Q NPCt- Let 11, H', and 11" be problems in NP, and, furthermore, suppose 
n' is in NPCk- If H' <t H, then, in a sense, 11 is at least as hard as 11' (which gives an 
interpretation of the symbol "<t")- Suppose 11' <t H but suppose also that 11' is not Karp- 
reducible to 11. If 11' <k H", then we can say that "H" is at least as hard as 11", because, to 
solve n' (and thus any other problem in NP), On has to be used at least as many times as 
On"', if any Turing reduction proving H' <t n requires more than one call to On, then we 
can say "H" is harder than H". Therefore, if NPCk 7^ NPCt, then the problems in NPCk 
are harder than the problems in NPCt \ NPCk; thus NPCk arc the hardest problems in NP 
(with respect to polynomial-time reductions). 

A problem 11 is NP-hard when H' <t 11 for some Karp-NP-complete problem If e NPCk- 
The term "NP-hard" is also used for problems other than decision problems. For example, 
let n' £ NPCk; then WMEM(5A/,Ar) is NP-hard if there exists a polynomial-time algorithm 
for n' that calls OwMEM(5Af.„)- 

2.2.2 Quantum separability problem in NP 

Fact [T] suggests that the quantum separability problem is in NP: a nondeterministic Turing 
machine guesses {(ft, [IV'i^)], [|^f )])}i!£i^^ and then easily checks that 

[p] - E p^\\^t)mt\] ® ufm€\]- (30) 

4=1 

Technically, membership in NP is only defined for decision problems. Since none of the 
weak membership formulations of the quantum separability problem can be rephrased as 
decision problems (because problem instances corresponding to states near the boundary of 
Sm.n can satisfy both possible answers), we cannot consider their membership in NP (but 
see Section [2.2.41 where we define NP for promise problems). However, EXACT QSEP is a 
decision problem. 

Problem 1 Is EXACT QSEP in NP ? 



Hulpke and BruB 57| have formalized some important notions related to this problem. They 



show that if p € S{Sm,n, for some (5 > 0, then each of the extreme points Xi G Sm.n in 
the expression p — X]f=i^ PiXi can be replaced by Xi, where [xi\ has rational entries. This 
is possible because the extreme points (pure product states) of Sm,n with rational entries 
are dense in the set of all extreme points of Sm,n- However, when p ^ S{Sm.n , ^S), then 
this argument breaks down. For example, when p has full rank and is on the boundary of 



'^I use square brackets to denote a matrix with respect to the standard basis. 
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Sm.n, then "sliding" Xi to a rational position Xi might cause Xi to be outside of the affine 
space generated by {xi}i^i^,,,^k- Figure [1] illustrates this in R'^. Furthermore, even if Xi can 



Fig. 1. The dashed triangle outlines the convex hull of xi, X2, and xs, shown as dots at the 
triangle's vertices. This convex hull contains p, shown as a dot inside the triangle, and forms a 
(schematic) face of Sm,n- The curves represent the allowable choices for the Xi. Sliding any of the 
Xi takes conv{xi, X2, 2:3} outside of the face. Incidentally, Sm^m has no maximum-dimensional 
faces (facets); this follows from results in 58]. 

be nudged comfortably to a rational Xi, one would have to prove that (xi) e 0(poly(([p]))), 
where {X) is the size of the encoding of X. 

So, either the definition of NP does not apply (for weak membership formulations), or we 
possibly run into problems near the boundary of Sm,n (for exact formulations). Below we 
give an alternative formulation that is in NP; we will refer to this problem as QSEP. The 
definition of QSEP is just a precise formulation of the question "Given a density operator p, 
does there exist a separable density operator a that is close to p7" 

Definition 10 (QSEP) Given a rational density matrix [p] of dimension MN-by-MN, and 
positive rational numbers 6p, e' and 5' ; does there exist a distribution {{pi] ai, Pi)}i=i,2,....M^N^ 
of unnormalized pure states cti G C^^ , Pi S where Pi > 0, and pi and all elements of oti 
and (3i are [log2(l/(5p)] numbers (complex elements are x + iy, x,y G R; where x and y 
are [log2(l/(5p)] numbers) such that 







< e' for all i 



(31) 



and 



\\[p]-a\\l:^ tr{{[p]-af)<6' 



(32) 
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where a := J2i=i PiCt-ta] (g) j3i(3l ? 

Note that these checks can be done exactly in polynomial-time, as they only involve elemen- 
tary arithmetic operations on rational numbers. To reconcile this definition with the above 
question, we define a as the separable density matrix that is the "normalized version" of a: 



(33) 



where := Pi/Y.iPi^ 
can derive that 



ai \\ai 



and Pi := Using the triangle inequality, we 



|ct - d\\2 < ^Pi 



(34) 



where the righthand side is less than e' when (|3ip is satisfied. If ([5^ is also satisfied, then 
we have 



||[p]-<T||2<||M-^||2 + ||<T-a||2<<5' + e', 



(35) 



which says that the given [p] is no further than S' + e' away from a separable density matrix 
(in Euclidean norm)f 

The decision problem QSEP is trivially in NP, as a nondctcrministic Turing machine need 
only guess the [log2(l/<^p)]-bit distribution {{pi] on, /3i)}i=i,2,...,M2Ar2 and verify (in polytime) 
that (Plj) and ([5^ are satisfied. 

2.2.3 NP- Hardness 

Gurvits has shown WMEM(5A/,Ar) to be NP-hard (with respect to the complexity-measures 
M and (S), i.e. min{M, TV} and 1/S must be allowed to increase) [sH. More details about 
this result appear in Section r2. 2. 51 

We check now that QSEP is NP-hard, by way of a Karp-reduction from WMEM(5A/,Ar). 
We assume we are given an instance / := {[p], S) of WMEM(5M,Ar) and we seek an instance 
/' {[p'],Sp, e', S') of QSEP such that if /' is a "yes" -instance of QSEP, then / satisfies P^ : 
otherwise / satisfies ((20|). It suffices to use [p'] = [p]. It is clear that if 5' and e' are chosen such 
that 6 > S' + e' , then /' is a "yes" -instance only if / satisfies For the other implication, 
we need to bound the propagation of some truncation-errors. Let p :— \log2{l/ Sp)~\ . 

Recall how absolute errors accumulate when multiplying and adding numbers. Let x = 
X -\- ZXa, and y ~ y ^ where x, y, x, y, 

and Ay are all real numbers. Then we have 



xy 
x + y 



xy + xA. 
x + y + A 



y -r yAx 



AxAy 



(36) 
(37) 



For \y\ < 1, because we will be dealing with summations of products with errors, it is 
sometimes convenient just to use 



\xy-xy\ < \Ay\ + \Ax\+ina:i{\Ax\,\Ay\} 



(38) 



' I have formulated these checks to avoid division; this makes the error analysis of the next section simpler. 
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to obtain our cumulative errors (which do not need to be tight to show NP-hardness). For 
example, if x and y are the p-bit truncations of x and y, where < 1, then \^x\, < 

2~P; thus a conservative bound on the error of xy is 

\xy - xy\ < |AJ + |A,| + |A,| = 3|A,| < 22|A,| = 2-(p-2). (39) 

Proposition 1 Let a £ Sm.n be such that a — J2i=i Pi(^i<^i ^ , and let 
{(pi;ai,^i)}j=i_2,...,M2Ar2 be the p -bit truncation o/ {(p^; ai, /3i)}j=i^2,...,Af2Ar2 . 
Then ||cr - a-||2 < M^N^2-^p-'^-^\ where 

<T ^ Piaial (g) (3i(3l . (40) 



Proof Letting -fi := piaia\ ® Pif]} — PiCtial ^ PiPj, we use the triangle inequality to get 



(41) 



It suffices to bound the absolute error on the elements of [pjQ:iaJ(8)/3i/3|]; using our conservative 
rule ([55]) . these elements have absolute error less than 2-<-p-'^\ Thus [7,] is an MN-hy-MN 
matrix with elements no larger than 2~(^'~^) in absolute value. It follows that (tr(7j^))^/^ is 
no larger than \/ MN2^^'P^''-^^ in absolute value. Finally, we get 



cr - CT 2 < 



tr(7f) < M3Ar32-(p-7.5)_|-| 



(42) 



Proposition 2 Let a he as in Proposition[li Then for all i ~ 1,2, .. . M'^N'^ 



< 



(43) 



Proof The absolute error on J2jPj M'^N^2 p. The absolute error on (resp. ||/?i|P) 

is no more than M2~'^p~^^ (resp. 7V2~(p~^'). This gives total absolute error of 



pj 



< M^N^2~^P~^ln 



(44) 



Let S' := Af3Ar32-(p-8) ^1 ._ ^3^32-(p-5) ^^^^ ^ g^^j^ ^j^j^^ e' + 5' < 5. Suppose 
there exists a separable density matrix a such that — it||2 = 0. Then Propositions [T] and 
[2] say that there exists a certificate a such that ([3T|) and (l32|) are satisfied. Therefore, if /' is 
a "no" -instance, then for all separable density matrices a, \\[p\ — a\\2 > 0; which implies that 
/ satisfies (PU]) . This concludes a polytime Karp-reduction from 'WMF,M{Sm,n) to QSEP 
(actually, from WMEMin(5M,Jv) to QSEP): 



Fact 3 QSEP is m NPCt. 
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2.2.4 Nonmembership in co-NP 

Technically, WMEM(5A/.Ar) is not in NP because it is not a decision problem; but it is a 
promise problem. Recall that a promise problem 11 may be defined as a generalization of a 
decision problem, where, instead of just yes-instances Yn and no- instances Nn, we allow a 
third set of maybe- instances (the "promise" is that the given instance is in Yn U Nn)- For 
n = WMEM(5m,jv), we have Yn = {{x, 5) : x e S{Sm,n, -5), (5 > 0} and Nn = {{x, 5) : x e 
T^M,N \ S{Sm,Nt5),5 > 0} (where we have implicitly restricted all states to being rational 
density matrices [p]). For our purposes, a promise problem 11 is defined to be in Promise-NP 
if every yes-instance has a succinct certificate of being a yes-instance or a maybe-instance. 
Accordingly, WMEM(5j\/^Ar) is clearly in Promise-NP. 

Is either EXACT QSEP or QSEP in co-NP? To avoid possible technicalities, we might first 
consider the presumably easier question of whether WMEM(iSj\/^jv) is in Promise-co-NP: Does 
every entangled state p ^ S{Sm,n, ^) have a succinct certificate of not being in S{Sm.n, —(5)? 
It may or may not be the case that P equals NPflco-NP, but a problem's membership in 
NPnco-NP can be "regarded as suggesting" that the problem is in P [HHl- Thus, we might 
beheve that WMEM(5A/,Ar) is not in Promise-co-NP (since WMEM(5m,w) is NP-hard). 

Let us consider this with regard to entanglement witnesses, which are candidates for 
succinct certificates of entanglement. We know that every entangled state has an entanglement 
witness A e Hm.at that detects it (see footnote on page fTO|) . However, it follows from the 
NP-hardness of WMEM(iSA/_Af) and Theorem 4.4.4 in that the weak validity problem for 
K = Sm,n (WVAL(5A/,Ar)) is NP-hard|™ 

Definition 11 (Weak validity problem for K (WVAL (iiT))) Given a rational vector c G 
R", a rational number 7, and rational e > 0, assert either that 

(Fx < 7 -|- e for all x £ K, or (45) 
Fx > 7 — e for some x £ K. (46) 

So there is no known way to check efficiently that a hyperplane iTA^t separates p from Sm,n 
(given just the hyperplane); thus, an entanglement witness alone does not serve as a succinct 
certificate of a state's entanglement unless WVAL{Sm.n) is polytime solvable. However, one 
could imagine that there is a succinct certificate of the fact that a hyperplane nA,b separates 
p from S]\i^N- If such a certificate exists, then WVAL(iSA/,Ar) is in Promise-NP (and thus 
WMEM{Sm^n) is in Promise-co- NP)h 

With regard to QSEP, we have the following: 

Fact 4 QSEP is not in co-NP, unless NP equals co-NP. 

This follows from the fact that if any Turing-NP-complete problem is in co-NP, then NP 
equals co-NP [54|. It is strongly conjectured that NP and co-NP are different [5^, thus we 

"Theorem 4.4.4 in [soll . applied to Sm iVi states that there exists an oracle-polynomial-time algorithm that 
solves the WSEP(iSa/,jv) given an oracle for WVAL(iSm,jv)- 

"WVAL(K) is in Promise-NP if, for any instance c, 7, e satisfying c^x < 7 — e for all x £ K, there exists a 
succinct certificate of the fact that c^x < "f + t for all x S K. 
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might believe that QSEP is not in co-NP. We would like to be able to use Fact |4] to show that 
WWA\j{Sm.n) is not in Proniise-NP unless NP equals co-NP. However, for this, we would 
require that WVAL(5A/^Ar) is in Promise-NP implies QSEP is in co-NP; but this is not the 
case, because exhibiting a separating hyperplane for p (i.e. showing that p is entangled) does 
not make p a no-instance of QSEP. 

2.2.5 Strong NP-hardness 

The NP-complete problem known as PARTITION may be defined as follows: Given a nonneg- 
ative integral vector a G Z", does there exist a solution z E {—1, 1}" to the equation a^z = 0? 
It is well known that there exists a "dynamic programming" algorithm that solves PARTI- 
TION in time 0(poly(n||a||i)), where ||a||i is the sum of the elements of a [Hij. This is known 
as a pseudopolynomial-time algorithm, because if a is restricted such that ||a||i e 0(poly(7i)), 
then the algorithm runs in "polynomial time" . 

Aaronson fsoll notes that Gurvits' original NP-hardness result (in f5l|) more precisely 
shows that WMEM(5M,Ar) is NP-hard provided that 1/5 is exponentially large, as I briefly 
explain now. For this section only, we switch convention: M > N . The full reduction chain 
that Gurvits uses to prove NP-hardness is 

PARTITION <K RSDF <k WVAL(5A/,Ar) <t WMEM(5A/,Ar), (47) 

where the robust semidefinite feasibility (RSDF) problem is defined as follows: 

Definition 12 (RSDF) Given k I x I, rational, symmetric matrices Bi, . . . , Bk and rational 
numbers C and rj, assert either that 

F{Bu...,Bk) < C + r], or (48) 
FiBi,...,Bk) > C~V, (49) 

where F{Bi, ...,Bk):= max^g^i n^n^^i T.\'^i{x^ B.^xf . 

Given a PARTITION instance a e Z', we want to solve it using an oracle for RSDF. The reduc- 
tion (in [eOl) from PARTITION to RSDF says that rj needs to be on the order of 1 /poly(Z| |a| I2). 
But this implies that, for a to be an NP-hard instance of PARTITION, 1/rj needs to be expo- 
nentially large in I. In other words, WVAL(5A/,Ar) (and hence WMEM(5A/,Ar)) is only shown 
to be NP-hard when the accuracy parameter is very small. It is still conceivable, though, that 
WVAL(5A/,Ar) (resp. WMEM(5A/,Ar)) is tractable when 1/e (resp. 1/5) is in 0(poly(M, iV)). 
Below, I show that a new reduction discovered by Gurvits [61] (inspired by the proof of Lemma 
3 in [63]) removes the possibility for such a family of WVAL(5Af,Ar) instances in a certain 
regime of e; moreover, I also remove this possibility for a problem slightly more difficult than 
the weak membership problem for Sm,n- 
The new reduction chain is 

CLIQUE <K WMQS <k RSDF <k WVAL(5Af,Ar) <t WMEM(5A/,Ar), (50) 

where CLIQUE e NPCk (see [s^) is the problem of deciding whether the number of vertices 
in the largest complete subgraph (clique) of a given simple graph on n vertices is at least c 
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(given also integer c < n), and WMQS is the problem of weakly deciding a bound on the 
maximum of the quadratic form Ay over the simplex A„ := {y G R" : yi > 0, \ \y\\i = 1}: 

Definition 13 (WMQS) Given rational, symmetric A G J^"X" with nonnegative entries 
Aij and rational numbers C' and rj' > 0, assert either that 

H{A) < C + V\ or (51) 
HiA) > C-V', (52) 

where H{A) := maxj^gA„ y^Ay. 

The first link in this chain is well known via the following theorem!" 

Theorem 1 ( [63] ) Let G be a simple graph on n vertices, and let Ac be the adjacency matrix 
for g\' Let k be the size of the maximum complete subgraph of G. Then 

max y^Aoy = 1 — (53) 



Suppose (G, c) is a given CLIQUE instance, where G has n vertices. To transform (G, c) into 
a WMQS-instance, just set C to be the midpoint of interval /c = [1 — l/(c — 1), 1 — 1/c] 
and set rj' so that the interval [C — rj' , C + rj'] is strictly contained in Ic (and set A :— Ac). 
Note that such an 77' exists in rj((c - 1)"^ - c^^) e ^{71^^). Therefore, WMQS is NP-hard 
(with respect to n and (??')) even when l/r;' is restricted to being in 0(poly(rt)), which we 
call strong NP-hardness (see [ssl). 

The second link Gurvits establishes by noting that, via a change of variables yi^ xj, 



and 



max y Ay 



XiXj ) 



max 

xeR'M|a:||2 = l 



E 

2J = 1 



A, 



2 2 




Ay a; j 



where B^^ , for all 1 < i < j < n, is the matrix with 




l<'i<j<n 



{x'B 



(54) 



(55) 



in positions (j,j) and (j, i), and 



zeros elsewhere (note there are n{n — l)/2 matrices B^^). Thus RSDF is strongly NP-hard 
(with respect to / and (77)) in the regime k > l{l — l)/2, because we can make some of the 
blocks Bi' zero-blocks (the rest of the instance-transformation is (C,??) := (C'j V))- 
The third link is established in [5l|, where Gurvits shows that, for 



B := 







\Bm-i 



Bi 








Bai- 




(56) 



/ 



"Thanks to Etienno de Klerk at University of Waterloo for pointing me to this theorem. 

^Aq has a 1 in position whenever is an edge of G, and otherwise has a {Aq has just zeros on the 

diagonal) . 
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where the zeros are N x N blocks of and the Bi are real symmetric N x N matrices, the 
following holds: 



A/-1 



max tr(Ba) = max (x^ Bi>x)'^. (57) 

<yeSM,N a;eR",||x||2=l 

It follows that WVAL(5m.a') is strongly NP-hard (with respect to N and (e)) in the regime 
M > N{N— l)/2 + 1 (again, the rest of the instance-transformation is trivial: (7, e) := (C, 77)). 
But suppose we had an oracle for WVAL(5A/,Ar)7v<M<7V(Af-i)/2 and wanted to solve the 
instance of CLIQUE. Then, by setting M := N := n{n — l)/2 + 1 and making each Bi/ block 
(i' = 1, . . . , N — 1) zeros but for the upper left n x n submatrix (into which we put -B'-' ), we 
have that 



M-l 

{x'^B'^xf. (58) 

i<j< 



max (x'^Biix)^ = max (a 

a;eR",||x||2 = l ' ^eR",||x||2 = l ' 

t' — l l<z<7<n 



Thus WVAL(5j\/^jv) is also strongly NP-hard (with respect to N and (e)) in the regime 
2 < iV < M. 

The last link in the reduction is more correctly split up into two links: 

WVAL(5A./,Ar) <K WVI0L(5m,jv) <t WMEM(5Af,Ar), (59) 
where the following definition applies: 

Definition 14 (Weak violation problem for K (WVIOL(J'r))) Given a rational vector 
c G R", a rational number 7, and rational e > 0, either 

• assert c^x < j + e for all x G K , or 

• find a vector y G S{K, e) with c"'"y > 7 — e. 

It is clear that WVIOL(iSM,Ar) is also strongly NP-hard. But the Turing-reduction from 
WVI0L(5A/.Ar) to WMEM(iSM.jv) is highly nontrivial in that the only proof of this reduction, 
appearing in Theorem 4.3.2 of [50j, requires the shallow-cut ellipsoid method. The accuracy 
parameters for the WMEM(iSj\/,Af)-oracle queries in this reduction only have exponentially 
small lower bounds. Thus the problem remains: 

Problem 2 Is WMEM(5M,Ar) tractable when 1/S is in 0{poly{M, N))? 

Let us consider the following problem, which is more difficult than the weak membership 
problem because it asks for the normal vector to a separating hyperplanc in the case where 
the given point is not inside the convex set: 

Definition 15 (Weak separation problem for K (WSEP(ii'))) Given a rational vec- 
tor p e R" and rational 5 > 0, either 
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assert p G S{K,6), or 

find a rational vector c € R" with ||c||oo — 1 such that c'^x < c'^p + S for every x G K . 



Note that WSEP(iSM,Af) asks either to assert that the given density matrix is almost separa- 
ble, or to find an approximate entanglement witness. A Turing reduction from WVI0L(5M,Ar) 
to WSEP(5M.Ar) (one of which appears in Theorem 4.2.2 of [i^]), is much more straightfor- 
ward and does not require the ellipsoid method - any cutting-plane algorithm for the weak 
nonemptiness problerrp relative to a weak separation oracle suffices. Applying the analytic- 



center algorithm of Atkinson and Vaidya 6J] gives a Turing-reduction that only needs to 



make polynomially-accurate WSEP(5M,Ar)-queries: 

Fact 5 WSEP(5A/,Ar) is strongly NP-hard (w.r.t. N and {5) ) in the regime 2 <N < M. 
2.2.6 Possibility of a Karp Reduction 

To date, every decision problem (except for QSEP) that is known to be in NPCt is also 
known to be in NPCk [69||^ While it is strongly suspected that Karp and Turing reductions 
are inequivalent within NP, it would be surprising if QSEP, or some other formulation of the 
quantum separability problem)* is the first example that proves this inequivalence: 

Problem 3 Is QSEP in NPCk ? 

One reason to believe that a Turing reduction is necessary to prove the NP-hardness of the 
quantum separability problem is that a proof (see Section [2. 2. 5[) seems to require a reduction 
from WVAL(5m.a') to WMEM(5A/.Ar); in turn, this reduction seems to require the shallow- 
cut ellipsoid method (a Turing reduction). It is a long-standing open problem as to whether 
the reduction from WVAL(5A/,Ar) to WMEM(5M,Af) can be done differently. However, as 
the NP-hardness of WMEM(5A/,Af) is a relatively recent result, there may be an altogether 
different proof of it that does not require a reduction from WVAL(5A/,Ar) to WMEM(5A/,Ar). 

Note that, because of Fact[3l a negative answer to Problem [3] implies that P 7^ NP. Note 
also that a direct reduction from some 11' € NPCk to QSEP (or some other formulation) 
would depend heavily on the precise definition of QSEP rather than the true spirit of the 
quantum separability problem captured by WMEM(5Af.Ar). Thus, if the answer to Problem 
[3] is positive, it might be easier to look for a Karp-reduction from some 11 £ NPCk to 
WMEM{Sm,n)- 



'The weak nonemptiness problem for K is merely to find a point in S{K, e) or assert that S{K, —e) is empty. 
"^By "known to be in NPCt", I mean that the language corresponding to the decision problem can be defined 
and shown to be Turing-NP-complete, independent of any unproven assumptions. See [66| for languages that 
are suspected to be Turing-but-not-Karp-NP-complete, whose existence depends on unproven assumptions 
about NP. 

"By "formulation of the quantum separability problem", I mean an NP-contained approximate formulation 
that tends to EXACT QSEP as the accuracy parameters of the problem tend to zero. 
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3 Survey and complexity analysis of algorithms for the quantum separability 
problem 

For the survey, I concentrate on proposed algorithms that solve an approximate formulation 
of the quantum separability problem and have (currently known) asymptotic analytic bounds 
on their running times. For this reason, the SDP relaxation algorithm of Eisert et al. is 
not mentioned here (see Section [1.2.2^ : though, I do not mean to suggest that in practice it 
could not outperform the following algorithms on typical instances. As well, I do not analyze 
the complexity of the naive implementation of every necessary and sufficient criterion for 
separability, as it is presumed that this would yield algorithms of higher complexity than the 
following algorithms. For an exhaustive list of all such criteria, see the book by Bengtsson 



and Zyczkowski 67 1 



I give complexity estimates for several of the algorithms surveyed. The main purpose 
below is to get a time-complexity estimate in terms of the parameters Af, N , and 5, where 5 
is the accuracy parameter in WMEM(5m.a')- The running-time estimates are based on the 
number of elementary arithmetic operations and do not attempt to deal with computer round- 
off error; I do not give estimates on the total amount of machine precision required. Instead, 
where rounding is necessary in order to avoid exponential blow-up of the representation of 
numbers during the computation, I assume that the working precisior|* can be set large enough 
that the overall effect of the round-off error on the final answer is either much smaller than 5 
or no larger than, say, 5/2 (so that doubling 6 takes care of the error due to round-off). 

3.1 Naive algorithm and 5 -nets 

The naive algorithm for any problem in NP consists of a search through all potential succinct 
certificates that the given problem instance is a "yes" -instance. Thus QSEP immediately gives 
an algorithm for the quantum separability problem. Hulpke and Brufi [s^ have demonstrated 
another hypothetical guess-and-check procedure that does not involve the probabilities pi. 
They noticed that, given the vectors : O'^c can check that 

{ [IV'f >] [(V'f |] ® [IV-f )] [(V-f |]}f=?' is afiinely independent; and (60) 



[p] e conv{[|V.f |] ® [IV-f (61) 

in polynomially many arithmetic operations (and they give an algorithm for the separability 
problem based on this observation). We can, in principle, reformulate QSEP to incorporate 
the ideas of Hulpke and Brufi in order to get a better naive algorithm. The reader is referred to 
[i^ l for details (and for how our approach differs from theirs - essentially, their algorithm solves 
a more exact formulation of the separability problem) ; we quote the asymptotic running-time 
estimate of {MN/5f^^"'^"+^""^'K 

QSEP can be further reformulated to avoid searching through all p-bit-precise pure states 
by using the concept of a net on (or covering of) the unit sphere. Let Sm be the Euclidean 
unit sphere in C*^. In principle, we can use a Euclidean 5 -net of S^/, which is a minimal 

I Kf^'^ I 

set of points A/"/^ :— {\xi)}\^\ C Sm such that for any |a;) e Sm there exists \xi) e A/"/'^ 



' "Working precision" is defined as the number of significant digits tfie computer uses to represent numbers 
during tfic computation. 
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such that \\\x) — \xi)\\2 < 5. The optimal size of a 5-wei on the real sphere is known to 
be no larger than (1 + 2/(5)^ [ii], thus we can take |7V/^| < (1 + 2/(5) Assuming the 
availability of asymptotically optimal A/"/^ for all M and 6 (where the real elements in each \xi) 
have p bits of precision), the complexity of the naive algorithm for separability is reduced to 
(2/(5)°(*^^^''+*^''^^), which simply corresponds to the number of W^N"^ -suhsets oi Af^' x JV^^ . 
We will assume availability, or advice, of (5-nets for the complexity estimates of several of the 
following algorithms. 

3.2 Bounded search for symmetric extensions 

In Section ll.2.1[ we considered two tests - one that searches for symmetric extensions of p, 
and a stronger one that searches for PPT symmetric extensions. Now I show that recent 
results can put an upper bound on the number k of copies of subsystem A when solving 
an approximate formulation of the separability problem. The bound only assumes symmetric 
extensions, not PPT symmetric extensions, so it is possible that a better bound may be found 
for the stronger test (Problem [4]). 

If a symmetric state g £ X'((C'*)«'") has a symmetric extension to X>((C'^)«'("+")) for all 
TO > 0, then it is called (infinitely) exchangeable. The quantum de Finetti theorem (see 
and references therein) says that the infinitely exchangeable state g is separable. Recalling 
the terminology of Section [1.2.11 it is also possible to derive that, for p S I?(C*^ (g) C^), 
if there exists a symmetric extension of p to fc copies of subsystem A for all A; > 0, then 
p G Sm,n- This is the result that proves that Doherty et al.'s hierarchy of tests is complete: 
if p is entangled, then the SDP at some level ko of the hierarchy will not be feasible (i.e. will 
not find a symmetric extension of p to feg copies of subsystem A) . 

It seems reasonable that, if we are only interested in whether p is (5-close to Sm,n, we 
should not need to check for extensions of p to fc copies of subsystem A for k larger than some 
bound k = k{M,N,5). In fact, we can use results of Christandl et al. [1| to compute just 
such a A: I" We require the following theorem: 

Theorem 2 ([3j) Suppose p G 'Dm.n o,nd there exists a Base- symmetric extension p' of p to 
k > 2 copies of subsystem A, i.e. (/ P)p' = p' for all k\ permutations P of the k copies of 
.subsystem A. Then 

tr\p-a\<—, (62) 

for some a G Sm.n- 

Note that the result uses the trace distance, trjAT — Y\, between two operators X and Y. 
Let us assume we are solving the weak membership formulation of the quantum separability 
problem with respect to the trace distance, and with accuracy parameter S. Then, setting 
S = AM/k, we get the following upper bound for k: 



"Recall that the Euclidean distance between two vectors in C depends only on the real part of their inner 
product, which behaves exactly like the dot-product of real vectors in R^*^. 

"Thanks to Andrew Doherty for calling my (and Christandl et al.'s!) attention to this; otherwise, I would be 
deriving a worse bound on k, based on results in [toII . 
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Corollary 1 To solve WMEM(5M,Af) (with respect to the trace distance) with accuracy pa- 
rameter 6 by searching for symmetric extensions (as described in Section ] 1.2.1]} . it suffices to 
look for symmetric extensions to 

k := [4M/(51 (63) 

copies of subsystem A. 

To estimate the total complexity of the algorithm, note that 

(65) 
(66) 



k J \ k J k\M\ 
1 {M + kY^'+^ (\ 1 



where in the last line we used Stirling's approximation n! ~ n"V27rn/e". Substituting k 
AM/ 5 for fc, we get 




k M ) ^ ^ {AM/5fM^^^ ^ (4/(5)'= ^ ' 



^ (4/^)*^ (68) 



^(4/5)*^ {5/ AM + 1/Mf'^ (69) 
/27r 

^ :(4/^)*^(l/Af)'/'. (70) 



V27r 

Just to solve the first constraint in ([7]) requires ^/n (but usually far fewer) iterations of 
a procedure that requires O(m^n^) arithmetic operations, for m = ((dgj)^ — M'^)N'^ and 
n = idsj, )'^N^ 0]- That is, the complexity of each iteration is on the order of 
(rfSi:)'poly(M,iV,log(l/<5)). 

Problem 4 Can the upper bound k be improved by taking into consideration the PPT con- 
straints in (0)? 

We mention that a larger bound fc' 3> fc on fc can be derived from a theorem in [t^, which 
also can be used to compute an approximate separable decomposition of p in the case where 
the SDP algorithm finds a symmetric extension of p to fc' copies of subsystem A. 

3.3 Entanglement-witness search via global optimization 

Recall that an entanglement witness (for p) is defined to be any operator A G Hm.n such that 
tT{Aa) < tr(Ayo) for all a G Sm^n and some p e £m,n\ we say that "A detects p". Since every 



p £ £m.n has an entanglement witness that detects it 22|, one way to solve the quantum 
separability problem is to exhaustively (but not naively!) search for an entanglement witness 
for the given p. We mention that the dual of the SDP in the symmetric-extension search 
algorithm can be used to find an (approximate) entanglement witness for p (when the SDP 
is infeasible) 
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3.3.1 Large SDP method 

Perez-Garcia and Cirac [71] note that the following SDP effectively searches for an approxi- 
mate entanglement witness — A for p: 



minimize tr(ylp) (71) 
subject to: {xi\A\xi) > 0, for all |a;,) e 7V/^ and tr{A) = 1. (72) 

Define the following convex hull: 

C := convex,) {x,\(g> \b){b\ : \x,) G Ni\ \b) e C^}. (73) 

If the minimum is negative, then —A is an approximate entanglement witness for p because 
there is a hyperplane with normal —A that separates p from C (otherwise p is in C and is 
thus in Sm,n)- This is justified because for any p G Sm,n there exists a tr £ C such that 
f||i < 26, as we now verify. First, note that if | — |y) ||2 < 6 < 1, then Rc{x\y) > 1— (5^/2 
(since |||a;) — \y)\\2 ~ 2 — 2Re{x\y)) and thus 



llk)(^|-|2/>(2/llli = 2Vl-|(a^|y>P (see [55|, p. 415) (74) 

< 2^1- (Rc(a;|j/))2 (75) 

< 2v/l - (1 - (^2/2)2 (76) 
= 26^/1-6^4 (77) 

< 26. (78) 

If p = J2j ® foi" — ^-nd X]j — 1' tti™ choosing \xi.) € A/'/''^ such 

that \\\xi^) — |itj)||2 < 6 makes a := Xj\xi^){xij \ \vj){vj\ in C' with \\p — <j\\i < 26. 

The size (up to a constant factor) of the constraint of the SDP is n = \J\fg^\N (and the 
number of real variables to parametrize A is m = M'^N'^ — 1), thus the complexity of one 
iteration of the SDP is of the order |A/'/^|2poly(A/, iV, log(l/5)) (assuming A/"/^ is available). 

This approach is a discretization of Brandao and Vianna's robust semidefinite program 
(see Section fl. 2. 4p . which is 

minimize tr(j4p) (79) 
subject to: x^ Ax > 0, for all x e C*^ and tr(A) = 1. (80) 

(Note that, combined with Gurvits' NP-hardness result [sH, this demonstrates that robust 
semidefinite programs are, in general, NP-hard.) Essentially, Perez-Garcia and Cirac have 
removed the robustness by using a (5-net, which clarifies the complexity of the approach for 
deterministically solving WMEM(5A/.Ar). 

3.3.2 Interior-point cutting-plane algorithm with global optimization subroutine 

The algorithms in [4, 5] solve WMEM{Sm.n) by solving WSEP(5a/^jv) using a subroutine for 

W0PT(5m,jv): 

Definition 16 (Weak optimization problem for K (WOPT(K))) Given a rational vec- 
tor c e R" and rational e > 0, either 
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• find a rational vector y G R" such that y G S{K, e) and (Fx < c^y + e for every x G K; 
or 

• assert that S{K, — e) is empty\" 



Clearly, using a subroutine for W0PT(5M,Af) allows one to test whether a Hermitian operator 
A approximately detects p. The algorithms effectively perform a binary search through the 
space of all entanglement witnesses. For example, the algorithm in 0] searches through the 
space W {A e 'H.m,n ■ tr(A) — 0,tr(yl) < 1} of all normahzed entanglement witnesses by 
iterating the following: 

(i) Let A be an approximate center (interior point) of the current search space (which is 
initialized to >Vn{a; G T1m,n ■ tr{px) > 0}, but subsequently gets approximately halved 
in each iteration, in step (iv) below). 

(ii) Set A := A/\\A\\2 and give {A,e := S/5) to W0PT(5M,Ar) subroutine, which outputs 
o-A- 

(iii) If A approximately detects p, then return A; 

(iv) otherwise, use aA to generate a cutting plane which approximately halves the current 
search space (cuts it through A and the origin). If current search space is too small to 
contain a hyperplane that separates p from S{Sm.n,S), then return "p G S{SM.N,Sy\ 

The number of arithmetic operations required by the algorithm described in is 

0{{T + M^N^\og{l/S))M^N^\og^{M^N^/S)), (81) 

where T is the cost of one call to the W0PT(5Af.Ar) subroutine (see [il] for details). 

Now consider the complexity of computing an instance {A, e) of W0PT(5j\/^jv), H^lb = 1- 
For each Xi G A/"/^, we compute := argmax|j^|(a;i|(j|^|xi)|j)| via eigenvector analysis of 
(xil^jxi) (which is Hermitian) Let i denote the index i of an element \xi) of Mg^ that 
maximizes |(xi|(ji|^|xi)|ji)|. Then \xi)\ji) may be taken as a solution to W0PT(5a/,jv) 
because 

\{x^mA\^l)\ji) - max |/?) | < 2S, (82) 



'Tor e we consider, this will never be the case for us, as we only consider WOPT(iSj\/ at) and 5j\/^]v is far from 
empty. 

^Thanks to David Perez-Garcia for suggesting this method. 
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as we now verify. Let \a)\b) :— argniax|^^|^^ (aj (/3|yl|a) and let i* denote the index i of an 
element \xi) of A/'/"' such that \\\xi) — |a)||2 < 5. Writing \yh) for \y)\h) for any 

\{x^.h\A\x,.h) - {ah\A\ah)\ (83) 
= \{x,,h\A\xi.b) ~ {ah\A\x,,b) + {ah\A\xi.b) - {ab\A\ab)\ (84) 

= - |a)l|2 



.{b\A\x..,b) + {ab\A-p^^^^\b) 



\xi')-\a)\\2 \\\xi>) - \a)\y^ 



(85) 



< 25 max \(c\ib\A\d)\b)\ (86) 

\c),\d)ec'-' 

< 25 max |(c'U|d')l (87) 

|c'),|d')ecJ*^«iC" 

= 2(5max{A/A : A an eigenvalue of A^ A} (see [22], p. 312) 
- ^'^ /X! (where Ai(X) denotes eigenvalues of X) (89) 



= 2(5P||2 (since A is normal, see [73, p. 316) (90) 

= 25. (91) 

The inequality ([82|) follows from noting 

< (a;.- < < (a|(6|A|a) (92) 

Therefore, the complexity of the whole algorithm is on the order of 
|A/'/^|poly(M, iV, log(l/(5)) (assuming 7V/^ is available). 

3.4 Other algorithms 

We mention two other algorithms, whose running times cannot be easily compared to that of 
the above algorithms. 

3.4-1 Cross-norm criterion via linear programming 

Rudolph 73| derived a simple characterization of separable states in terms of a computation- 
ally complex operator norm || • ||^. For a finite-dimensional vector space V, let T{V) be the 
class of all linear operators on V. The norm is defined on T(C*^) (E) T(C^) as 

fe k 

:= inf{^ ||ui||i||Dj||i : t = '^u.i Vi}, (93) 

1=1 2=1 

where the infimum is taken over all decompositions of t into finite summations of elementary 
tensors, and \\X\\i :— tr{Vx^X). Rudolph showed that \\p\\j < 1 if and only if \\p\\j = 1, 
and that a state p is separable if and only if \\p\\^ = 1. 

Perez-Garcia |74l | showed that approximately computing this norm can be reduced to a 
linear program (which is a special case of a semidefinite program): min{c"^a; : Ax = fo, x > 0}, 
where A e R"^™, b e R", c € R™, and a; is a vector of m real variables; here, x > means 
that all entries in the vector are nonncgative. An LP can be solved in 0{m^L') arithmetic 
operations, where L' is the length of the binary encoding of the LP [tHI- The linear program 
has on the order of NPN"^ variables and \J^ijk\'^\J^i/k\'^ constraints, where k is an integer 
that determines the relative erroif' i^/ik — 1))^ — 1 on the computation of the norm. Thus 

s'The relative error of an approximation i of a; is defined as \x — x\/x. 
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the complexity of the whole algorithm is on the order of \N^jiJ\'^\N^^f.\'^Y"^\y{M,N,\og{l/5)) 
(assuming availability of Euclidean (l/fc)-nets). 

Suppose IIpII^ is found to be no greater than 1 + ry. Then, we would like to use 77 to 
upper-bound the distance, with respect to either trace or Euclidean norm, from p to Sm,n- 
Unfortunately, we do not know how to do this. This drawback, along with the fact that the 
error on the computed norm is relative as opposed to absolute, does not allow this algorithm 
to be easily compared to the other algorithms we consider. 

3.4-2 Fixed-point iterative method 

Zapatrin 76] suggests an iterative method that solves the separability problem!^ He defines 
the function $ : Hm,^ 'ii-M,N'- 

^{X):=X + \(^p- j J e<'^"l«<'^"l^l'^">«l^^">|V'^)(V^|® |V'^)(V'^|dSMrfS^) , (96) 

where Sm and Sat are the complex origin-centred unit spheres (containing, respectively, jV'^) 
and \tp^)), and A is a constant dependent on the derivative (with respect to X) of the qua ntity 
in parentheses (A is chosen so that $ is a contraction mapping). In earlier work 771 l78l. l79j. 
Zapatrin proves that any state cr in the interior S'^j jy of Sm,n may be expressed 

for some Hermitian Xcr. Thus the function $ has a fixed point Xp = ^{Xp) if and only if 
p € SIj ^ . When p G S^j jy , then a neighbourhood (containing 0) in the domain of $ can be 
found where iterating X^+i := $(Xi), starting at Xq 0, will produce a sequence {Xi)i that 
converges to Xp when p G iS^ ^, but diverges otherwise. 

Each evaluation of ^{X) requires + MN integrations of the form 

^(^-|«(.0B|x|^-)«|V>B>^3A|^A^^3B|^B^^^A|^A^^^B|^B^^SMrfS^, (98) 

where {e^}j and {e^}fe are the standard bases for C*^ and C^. However, the off-diagonal 
(j 7^ ^; / 7^ integrals have a complex integrand so are each really two real integrals; 
thus the total number of real integrations is M'^N'^. Let represent the number of pure 
states at which the integrand needs to be evaluated in order to perform each real numerical 
integration, in order to solve the overall separability problem with accuracy parameter S. 
Zapatrin shows that the approximate number of iterations required is upper-bounded by 



^Facts about iterative methods: First, the basic Newton-Raphson method in one variable. Suppose ^ is a zero 
of a function / : R — > R and that / is twice differentiable in a neighbourhood U{^) of ^. Then the Taylor 
expansion of / about xq G U (^) gives 

= /(C) = f{xo) + {i-xo)f'{xo) + --- (94) 

= f{xo) + {i-xo)f'{xo), (95) 

where ^ = xq — f{xo)/f'{xo) is an approximation of ^. Repeating the process, with a truncated Taylor 

expansion of / about ^, gives a different approximation ^ = ^ — /(^)//'(€). This suggests the iterative method 
Xi^l = ^(xi), for := X — f{x)/f'{x). If /'(^) 0, the sequence {xi)i converges to ^ if xq is sufficiently 

close to ^. More generally, if <I>(a;) : R" — » R" is a contractive mapping on B{xo,r), then the sequence 
{xo,^{xo),^{^{xo)), ■ ■ ■) converges to the unique fixed point in B{xo,r) (as long as ^{xo) £ B{xo,r)) [StII . 
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2A^(A^+l)L(log(l/(5), log(A^)), where L is a bilinear function of its arguments. The complexity 
of the entire algorithm is roughly S5poly(M, iV, log(l/(5)) (ignoring log(A^) factors). We can 
use nets on Sm and Sn to estimate the complexity of S5. It is clear that the numerical 
integration is more complex than solving WOPT(5m,7v); at the very least, it needs to sample 
points in Sm as well as Sm- Thus, I make the reasonable presumption that > \M^\\N^\. 

3. 5 Complexity comparison of algorithms and practical considerations 

The complexity estimates in the survey show that the two best algorithms are the bounded 
search for symmetric extensions (Section I3.2[) and the cutting-plane entanglement-witness 
search algorithm (Section l3.3.2p . The dominant (exponential) factors in the asymptotic com- 
plexity estimates are 

{dsj^f « 2*^ X (1/(5)^*'^ (symmetric-extensions search) (99) 

lAZ/^l « 2*=^ X (1/(5)2^ (entanglement-witness search). (100) 

As a caveat, recall that the estimate for the entanglement-witness search algorithm assumes 
the advice of asymptotically optimal A/"/^ , which in principle can be precomputed for the M 
and 5 of interest [80|. 

The bounded symmetric-extension search algorithm only experiences "exponential slow- 
down" when k approaches k. The SDP relaxation algorithm of Section [1.2.2l behaves similarly, 
in that successive SDP relaxations get larger, while the first SDP relaxation is feasible. Thus, 
a good strategy for a deterministic WMEM(5M,Ar) solver might be to start with these algo- 
rithms (after exhausting all the other efficient one-sided tests), and proceed until the SDPs 
get infeasibly large; then, switch to the entanglement-witness search algorithm, whose com- 
plexity bottleneck is the W0PT(5A/,Ar) subroutine, which has constant worst-case complexity 
throughout the execution of the algorithm, but whose task - essentially, searching the domain 
of the function /(|a), |/3)) :— {a\{(3\A\a)\(3) - can be parallelized. Interestingly, the subrou- 
tine need not find a certified optimum of / until its final execution, and even then only in 
the case where the algorithm will output p € S{Sm,n, S) 0]; thus, comparing the outputs of 
executions of a local optimum finder seeded at a few random points in the domain may suffice 
for at least some of the WOPT{Sm,n) calls. Finally, instead of using (5-nets, the subrou- 
tine should benefit from more-sophisticated, continuous global optimization methods (which 
may utilize calculus to eliminate large chunks of the domain of /) such as the semidefinite 
programming relaxation method of Lasserre ^3^, Lipschitz optimization 
global optimization algorithm using interval analysis (s^ . 
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